Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/Bf4a8ydJ8Mh3-UuZq_Eb1PoqN6I.roa
File: Bf4a8ydJ8Mh3-UuZq_Eb1PoqN6I.roa (raw, json)
Hash identifier: 2i3oqorxwJCCutfDD/a15cNoGMUCCfsmZVnH7in5hvY=
Subject key identifier: 05:FE:1A:F3:27:49:F0:C8:77:F9:4B:99:AB:F1:1B:D4:FA:2A:37:A2
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 0191236C496112A2407788BE93AF6249FD61
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/Bf4a8ydJ8Mh3-UuZq_Eb1PoqN6I.roa
Signing time: Mon 05 Aug 2024 16:43:04 +0000
ROA not before: Mon 05 Aug 2024 16:43:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214503
IP address blocks: 45.84.104.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Aug 2024 08:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:23:6c:49:61:12:a2:40:77:88:be:93:af:62:49:fd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: Aug 5 16:43:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05fe1af32749f0c877f94b99abf11bd4fa2a37a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:f1:9a:ca:88:df:d5:c4:43:d8:b2:89:ae:
e0:00:86:6c:63:6b:1f:e0:af:dd:a1:12:97:fc:2b:
e4:e1:94:82:42:66:5a:33:be:a8:8b:4a:e6:42:10:
98:b7:8a:ef:b5:2f:b7:73:43:38:26:b4:44:0c:70:
e1:cd:ae:c5:db:b5:e2:02:d9:3f:4d:1d:59:26:62:
d5:aa:d1:e0:1f:9f:d9:91:fd:30:b3:82:fd:02:14:
af:ee:63:b0:6d:37:2d:f9:3a:7f:0e:31:6f:9b:a1:
d3:3b:49:c1:f9:d8:9e:30:f0:c8:81:d1:39:46:ab:
97:0d:10:73:67:c1:25:e2:4f:8e:96:ca:58:f8:10:
dd:33:cb:6e:fb:2f:dc:10:8a:04:19:85:53:60:2e:
1f:b1:ba:1b:48:29:d4:aa:9d:88:f6:e0:23:5c:86:
b2:bd:b6:1c:22:ae:6b:8c:83:99:45:9f:10:0c:18:
11:64:1a:14:ce:b4:6a:bf:71:92:2a:6d:10:ac:d1:
a9:e0:6b:0f:d4:b9:14:7e:d4:2d:6a:a7:43:32:c9:
17:39:f1:cf:43:71:ca:ce:fd:e0:81:5d:38:cc:b2:
43:28:cb:99:79:9b:fb:69:e0:a5:91:f7:1b:5b:82:
e5:d6:a2:9f:9a:b9:5a:77:9b:3f:de:d3:82:96:83:
be:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FE:1A:F3:27:49:F0:C8:77:F9:4B:99:AB:F1:1B:D4:FA:2A:37:A2
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/Bf4a8ydJ8Mh3-UuZq_Eb1PoqN6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.104.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:9a:7e:f1:9a:7d:47:ff:7b:22:13:62:a0:4a:b7:50:e6:e8:
6c:17:03:0a:05:f7:27:70:19:d2:40:83:c6:6c:39:e5:81:e8:
98:1d:e2:ae:b0:8c:8c:a2:5a:5b:ad:90:e5:27:56:ea:f5:b8:
e5:9c:f2:98:81:90:8c:4d:ef:b1:19:dd:f3:da:f1:0a:36:28:
8a:5a:68:74:fd:b4:09:21:bf:e6:99:fe:08:42:a5:b7:d4:8b:
1f:54:a5:1a:33:1e:9e:4e:ed:9e:f2:b5:82:93:4f:aa:17:dc:
fd:38:54:6f:f2:79:ec:04:4e:f5:fa:7d:1d:5d:54:c7:72:e6:
ff:30:60:94:c4:33:8f:60:c8:59:77:78:ba:a9:e5:30:f4:6c:
c7:c2:12:1b:6e:c3:34:3c:fe:46:06:54:c3:55:df:13:aa:53:
f3:95:d1:e6:6b:76:e5:00:c5:a0:de:96:83:03:0b:16:ff:3e:
df:0a:2d:ae:77:82:96:c4:a6:65:18:38:c7:01:b7:34:8a:a7:
ff:48:30:7e:71:45:d8:91:e5:fa:97:41:20:66:07:3b:f2:eb:
51:fd:7a:55:90:24:c6:e6:0d:95:e0:ca:c9:b3:fd:f5:33:29:
38:2b:d3:86:cb:f5:28:b3:8c:47:8d:fc:51:fd:de:ad:9a:aa:
a3:0a:32:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZEjbElhEqJAd4i+k69iSf1hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjgwODAyYzY1NzlhNGQ0YTEwNjA4ZGNmOTJlOWFjZTk5
MDViMTYwHhcNMjQwODA1MTY0MzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWZlMWFmMzI3NDlmMGM4NzdmOTRiOTlhYmYxMWJkNGZhMmEzN2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQzxmsqI39XEQ9iyia7gAIZsY2sf
4K/doRKX/Cvk4ZSCQmZaM76oi0rmQhCYt4rvtS+3c0M4JrREDHDhza7F27XiAtk/
TR1ZJmLVqtHgH5/Zkf0ws4L9AhSv7mOwbTct+Tp/DjFvm6HTO0nB+dieMPDIgdE5
RquXDRBzZ8El4k+OlspY+BDdM8tu+y/cEIoEGYVTYC4fsbobSCnUqp2I9uAjXIay
vbYcIq5rjIOZRZ8QDBgRZBoUzrRqv3GSKm0QrNGp4GsP1LkUftQtaqdDMskXOfHP
Q3HKzv3ggV04zLJDKMuZeZv7aeClkfcbW4Ll1qKfmrlad5s/3tOCloO+JQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAX+GvMnSfDId/lLmavxG9T6KjeiMB8GA1UdIwQY
MBaAFEz4CALGV5pNShBgjc+S6azpkFsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zOThiYmItMTg0Zi00ODUxLWIyYTAt
OTFmNDlkOGQxMTVkLzEvQmY0YTh5ZEo4TWgzLVV1WnFfRWIxUG9xTjZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8zOThiYmItMTg0Zi00ODUxLWIyYTAtOTFmNDlkOGQxMTVk
LzEvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVRoMA0G
CSqGSIb3DQEBCwUAA4IBAQCNmn7xmn1H/3siE2KgSrdQ5uhsFwMKBfcncBnSQIPG
bDnlgeiYHeKusIyMolpbrZDlJ1bq9bjlnPKYgZCMTe+xGd3z2vEKNiiKWmh0/bQJ
Ib/mmf4IQqW31IsfVKUaMx6eTu2e8rWCk0+qF9z9OFRv8nnsBE71+n0dXVTHcub/
MGCUxDOPYMhZd3i6qeUw9GzHwhIbbsM0PP5GBlTDVd8TqlPzldHma3blAMWg3paD
AwsW/z7fCi2ud4KWxKZlGDjHAbc0iqf/SDB+cUXYkeX6l0EgZgc78utR/XpVkCTG
5g2V4MrJs/31Myk4K9OGy/Uos4xHjfxR/d6tmqqjCjJ6
-----END CERTIFICATE-----
Generated at Thu Aug 8 10:58:17 2024 by rpki-client on console-fra.rpki-client.org